Running Resilient Workloads with Istio
summary
Istio adds concrete controls for real production failure modes: a recorded demo deploys Istio (installed via Helm on a GKE cluster, Istio 1.0.2), injects Envoy proxy sidecars by configMaps, and uses Kiali service graph to show actual traffic. Examples show header‑based A/B canaries, Layer‑7 routing, per‑route timeouts, configurable retries/backoff, circuit breakers, rate limits, and fault injection; security features include mTLS and RBAC. Installation is slow over a bad VPN but completes and the Bookinfo demos and controls function as shown.
AI-written summary · about
chapters (10)
- 0:00Start
- 1:14Business Value
- 2:40Break the Monolith
- 8:24It's not plain sailing
- 9:02Production Kubemetes
- 13:51Observability
- 22:48Layer 7 Traffic Routing
- 27:24Resiliency
- 31:44Secunty
- 34:17Recap
related talks
53mStop reinventing the wheel with Istio
46mStop reinventing the wheel with Istio
48mIstio An open platform to connect, manage, and secure microservices
42mSecuring Kubernetes Workloads with Istio Service Mesh
28mA Not-so-Scary Way to Add Istio to Your Platform, Step by Step
40mStop reinventing the wheel with Istio
32mImplementing Zero Trust in a Kubernetes Cluster with Istio
42mIstio: Weaving, Securing and Observing microservices